CVE-2022-22223

CVE-2022-22223 is a Denial of Service (DoS) vulnerability affecting Juniper Networks Junos OS on QFX10000 Series devices when configured as transit IP/MPLS penultimate hop popping (PHP) nodes with Link Aggregation Group (LAG) interfaces. An attacker can send specially crafted IPv4 or IPv6 packets to cause multiple LAG interfaces to detach, leading to a sustained DoS condition. The vulnerability has a CVSSv3.1 score of 7.5 (HIGH), indicating a high severity. It can be exploited remotely over the network (AV:N) with low attack complexity (AC:L) and requires no user interaction (UI:N) or privileges (PR:N). The primary impact is a complete loss of availability (A:H) for affected network services. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage regarding this vulnerability. It is not listed on the CISA KEV catalog.